Skip to content
Sign in
5.5 Medium

CVE-2026-95512 Freetype: freetype: denial of service via repeated subroutine allocations in cid font loader

Description

A flaw was found in FreeType, specifically within its CID font loader. A remote attacker could exploit this vulnerability by tricking a user into opening content that embeds or references a specially crafted CID-keyed font. This crafted font can cause repeated allocations and decryptions of subroutine data across multiple font dictionaries, leading to excessive memory and CPU consumption. This can result in a denial of service (DoS) for the application or service processing the font, potentially causing it to hang or terminate.

CVSS 3.1 detail

Vector CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Exploitable with local access to the machine, without an account and if a user takes an action; an attacker can seriously compromise confidentiality, integrity or availability.

Attack vector
Local
Attack complexity
Low
Privileges required
None
Interaction
Required
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Affected products and versions

Product Affected versions Fixed in
Red Hat build of OpenJDK 11 ELS Versions not published
Red Hat Enterprise Linux 10 Versions not published
Red Hat Enterprise Linux 6 Versions not published
Red Hat Enterprise Linux 7 Versions not published
Red Hat Enterprise Linux 8 Versions not published
Red Hat Enterprise Linux 9 Versions not published
Red Hat Hardened Images 2.14 earliest → < 2.14.3-2.1.hum1 2.14.3-2.1.hum1

Other CVEs of Red Hat build of OpenJDK 11 ELS

The 5 CVEs of Red Hat build of OpenJDK 11 ELS →
CVE-2026-26740 Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the… 8.2 High CVE-2026-25646 LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network… 8.3 High CVE-2026-21932 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE… 7.4 High CVE-2026-22184 zlib versions up to and including 1.3.1.2 include a global buffer overflow in the untgz utility located under… 4.6 Medium
Track this CVE